Page 1 User’s Guide GPT-2541GNAC Indoor GPON HGU Default Login Details http://192.168.1.1 User Name: admin Password: 1234 Firmware Version 1.00 Edition 1, 9/2015...
Page 2  IMPORTANT!  READ CAREFULLY BEFORE USE.  KEEP THIS GUIDE FOR FUTURE REFERENCE. Graphics in this book may differ slightly from the product due to differences in operating systems, operating system versions, or if you installed updated firmware/software for your device. Every effort has been made to ensure that the information in this manual is accurate.
Page 3 Contents Chapter 1: Introduction Overview Hardware Connection LEDs (Lights) Advanced Configuration Chapter 2: Device Info Device Info Summary WAN Info LAN Statistics WAN Statistics Route Info ARP Info DHCP Leases Chapter 3: WAN GPON Layer2 Interface Layer-2 GPON Interface Configuration Ethernet Layer2 Interface Ethernet Layer-2 Interface Configuration WAN Service...
Page 4 Port Triggering Add Port Triggering Rule DMZ Host SIP ALG Chapter 7: Firewall Firewall General Default Policy Configuration Firewall Rules Firewall Rules Configuration MAC Filtering MAC Filtering Add Chapter 8: Parental Control Time Restriction Add a Time Restriction Rule URL Filter Add a URL Filter Rule Chapter 9: Quality of Service (QoS) QoS General...
Page 5 DNS Proxy Chapter 14: Interface Grouping Interface Grouping Interface Group Configuration Chapter 15: IP Tunnel IPv6inIPv4 (6RD) IPv6inIPv4 Configuration IPv4inIPv6 (Dual Stack Lite) IPv4inIPv6 Configuration Chapter 16: IPSec VPN IPSec VPN IPSec VPN Add Screen Technical Reference IPSec Architecture Encapsulation IKE Phases Negotiation Mode IPSec and NAT...
Page 6 Wireless MAC Filter Wireless MAC Filter Add Wireless Advanced Wireless Station Info Wireless 5GHz Basic Wireless 5GHz Advanced Screen Wireless 5GHz WPS Push Button Configuration Wireless 5GHz MAC Filter Wireless MAC Filter Add Wireless 5GHz Bridge Wireless 5GHz Station Info Chapter 21: Voice SIP Account SIP Server...
Page 7 SNMP Agent Chapter 26: TR-069 Client TR-069 Client Chapter 27: Internet Time Internet Time Chapter 28: User Passwords User Passwords Chapter 29: GPON Password GPON Password Chapter 30: Update Software Update Software Chapter 31: Reboot Restart Using the Web Configurator Chapter 32: Troubleshooting Overview Power, Hardware Connections, and LEDs...
Page 8 H A PT ER Introduction Chapter 1 1.1 Overview The GPT-2541GNAC GPON ONT combines high-speed Fiber Internet access with a built-in switch, a firewall and high-speed wireless networking capability. It has a phone port for making calls over the Internet (Voice over IP or VoIP). It also supports IPTV service when available from your service provider.
Page 9 1.2 Hardware Connection Make sure to use the proper cables and power adapter to connect the Router. Figure 2 Rear Panel The following table explains the connectors and buttons on the rear panel. Table 1 Rear Panel CONECTOR DESCRIPTION 12V-2A Connect the provided power adapter to the 12V-1A power connector.
Page 10 Table 1 Rear Panel (continued) CONECTOR DESCRIPTION Wifi5GHz/WPS Use this button to enable or disable the 5 GHz WiFi and WPS features on the Router. By default, WiFi is enabled on the Router. Press this button for 1 second to turn it off. To enable the WPS feature, press the button for more than 3 seconds The WPS LED on the front panel will flash green while the Router sets up a WPS Connection with the wireless device.
Page 11 1.3 LEDs (Lights) The following graphic displays the labels of the LEDs. Figure 3 Front Panel LEDs Figure 4 Rear Panel LEDs Table 2 LED Descriptions COLOR STATUS DESCRIPTION Power Blue The Router is receiving power and ready for use. The Router has hardware failure.
Page 12 Table 2 LED Descriptions (continued) COLOR STATUS DESCRIPTION Telf Blue The SIP registration is successful. Blinking The Router is negotiating the SIP registration. Green There is incoming or outgoing voice traffic. Blinking The Router has failed to register the VoIP service. There is no VoIP service.
Page 13 Access the Client Wizard screens. Enter the IP address: http://192.168.1.1. The login screen appears. The default password is random. Please refer to the label sticker at the bottom of the device. Enter the password. Click Entrar to enter the Client Wizard. The main screen appears.
Page 14 Click the Menu button and then Configuración avanzada Click Aceptar. Chapter 1 Introduction...
Page 15 The advanced configuration screens display. Use the menu on the left to navigate the screens. Refer to the rest of this guide for details about the screens. Click Logout to exit the configuration screens. Chapter 1 Introduction...
Page 16 H A PT ER Device Info Chapter 2 Device Info Summary Click Device Info > Summary to open this screen with general device and WAN connection status information. Figure 5 Device Info Summary Table 3 Device Info Summary LABEL DESCRIPTION Board ID This field displays the ID number of the circuit board in the Router.
Page 17 Table 3 Device Info Summary (continued) LABEL DESCRIPTION Bootloader This field displays the version of bootloader the Router is using. (CFE) Version Wireless This field displays the version of the driver for the Router’s wireless chipset. Driver Version Voice Service This field displays the version of the VoIP software the Router is using.
Page 18 WAN Info Click Device Info > WAN to open this screen which lists the Router’s WAN connections and their status. Figure 6 WAN Info Table 4 WAN Info LABEL DESCRIPTION Interface This shows the name of the WAN interface. veip0 stands for a virtual Ethernet card and is the foundation for veip0/* which are virtual WAN interfaces of the physical GPON line.
Page 19 Table 4 WAN Info (continued) LABEL DESCRIPTION IPv4 Address This displays the interface’s current IPv4 address if it has one. IPv6 Address This displays the interface’s current IPv6 address if it has one. LAN Statistics Click Device Info > Statistics > LAN to open this screen of traffic statistics counters for the Router’s wired and wireless LAN interfaces.
Page 20 Table 5 LAN Statistics (continued) LABEL DESCRIPTION Pkts This indicates the number of transmitted packets on this interface. Errs This indicates the number of frames with errors transmitted on this interface. Drops This indicates the number of outgoing packets dropped on this interface. Reset Click this to clear the screen’s statistics counters.
Page 21 WAN Statistics Click Device Info > Statistics > WAN Service to display the total, multicast, unicast, and broadcast traffic statistics counters for the Router’s WAN interfaces. Use the button to clear the counters. Figure 8 WAN Statistics Table 6 WAN Statistics LABEL DESCRIPTION Interface...
Page 22 Table 6 WAN Statistics (continued) LABEL DESCRIPTION Drops This indicates the number of outgoing packets dropped on this interface. Reset Click this to clear the screen’s statistics counters. Route Info Click Device Info > Route to display the Router’s IPv4 and IPv6 routing tables. Figure 9 Route Info Table 7 Route Info LABEL...
Page 23 ARP Info Click Device Info > ARP to display the Router’s IPv4 and IPv6 neighbor Address Resolution Protocol tables. This screen lists the IP addresses the Router has mapped to MAC addresses. Figure 10 ARP Info Table 8 ARP Info LABEL DESCRIPTION IPv4 / IPv6...
Page 24 DHCP Leases Click Device Info > DHCP to display the Router’s list of IP address currently leased to DHCP clients. Figure 11 DHCP Leases Table 9 DHCP Leases LABEL DESCRIPTION Hostname This field displays the name used to identify this device on the network (the computer name).
Page 25 H A PT ER Chapter 3 GPON Layer2 Interface The Router must have a layer-2 interface to allow users to use the GPON port to access the Internet. Log into the Router’s Web Configurator and click Advanced Setup > Layer2 Interface > GPON Interface to manage the GPON layer-2 interface.
Page 26 3.1.1 Layer-2 GPON Interface Configuration Click the Add button in the Layer2 Interface: GPON Interface screen to open the following screen. Use this screen to create a new layer-2 interface. Figure 13 GPON Interface Configuration Select the GPON port and click Apply/Save. The following table describes the fields in this screen.
Page 27 The following table describes the fields in this screen. Table 12 ETH Interface LABEL DESCRIPTION Interface/(Name) The name of a configured layer-2 interface. eth0 ~ eth3 represent the ethernet LAN ports 1 ~ 4. Connection Mode This shows the connection mode of the layer-2 interface. Remove Select an interface and click the Remove button to delete it.
Page 28 To use NAT, firewall or IGMP proxy in the Router, you need to configure a WAN connection with PPPoE or IPoE.  When a layer-2 interface is in VLAN MUX Mode, you can configure up to five WAN services on the Router. Figure 16 WAN Service Table 14 WAN Service LABEL...
Page 29 Table 14 WAN Service (continued) LABEL DESCRIPTION This shows whether NAT is activated or not for this interface. NAT is not available when the connection uses the bridging service. IPv6 This shows whether IPv6 is activated or not for this connection. IPv6 is not available when the connection uses the bridging service.
Page 30 Table 15 WAN Configuration: WAN Interface (continued) LABEL DESCRIPTION Back Click this button to return to the previous screen. Next Click this button to continue. 3.3.1.2 WAN Service Configuration This screen displays after you select the WAN interface for a new WAN connection. Figure 18 WAN Configuration: WAN Service Configuration Table 16 WAN Configuration: WAN Service Configuration LABEL...
Page 31 Table 16 WAN Configuration: WAN Service Configuration LABEL DESCRIPTION Allow as MLD This displays when you select the Bridging service type. Select this to have Multicast Source the Router add routing table entries based on the MLD traffic. Enter Service Specify a name to identify the service.
Page 32 PPPoE This screen displays when you select PPP over Ethernet (PPPoE) in the WAN Service Configuration screen. Figure 19 WAN Configuration: PPPoE Chapter 3 WAN...
Page 33 Table 17 WAN Configuration: PPPoE LABEL DESCRIPTION PPP Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given. PPP Password Enter the password associated with the user name above.
Page 34 Table 17 WAN Configuration: PPPoE (continued) LABEL DESCRIPTION WAN Interface If you selected Random, this field is automatically configured. Identifier If you selected Manual, enter the WAN Identifier in this field. The WAN identifier should be unique and 64 bits in hexadecimal form. Every 16 bit block should be separated by a colon as in XXXX:XXXX:XXXX:XXXX where X is a hexadecimal character.
Page 35 Table 17 WAN Configuration: PPPoE (continued) LABEL DESCRIPTION Enable MLD Select this check box to have the Router add routing table entries based on the MLD Multicast Source traffic. Back Click this button to return to the previous screen. Next Click this button to continue.
Page 36 IPoE This screen displays when you select IP over Ethernet in the WAN Service Configuration screen. Figure 20 WAN Configuration: IPoE Chapter 3 WAN...
Page 37 Table 18 WAN Configuration: IPoE LABEL DESCRIPTION Obtain an IP A static IP address is a fixed IP that your ISP gives you. A dynamic IP address is not address fixed; the ISP assigns you a different one each time you connect to the Internet. automatically Select this if you have a dynamic IP address.
Page 38 Table 18 WAN Configuration: IPoE (continued) LABEL DESCRIPTION WAN Interface Select Random to have the Device randomly configure a WAN Identifier, which is Identifier Type shown in the WAN Interface Identifier field. Select EUI-64 to use the EUI-64 format to generate an interface ID from the MAC address of the WAN interface.
Page 39 3.3.1.4 NAT and IGMP Multicast This screen is available only when you select IP over Ethernet in the WAN Service Configuration screen. Figure 21 WAN Configuration: NAT and IGMP Multicast: IPoE Table 19 WAN Configuration: NAT and IGMP Multicast: IPoE LABEL DESCRIPTION Enable NAT...
Page 40 Table 19 WAN Configuration: NAT and IGMP Multicast: IPoE (continued) LABEL DESCRIPTION No Multicast VLAN Select this check box to have the Router not filter multicast traffic based on its Filter VLAN. Enable MLD Select this check box to have the Router act as an MLD proxy on this connection. Multicast Proxy This allows the Router to get subscription information and maintain a joined member list for each multicast group.
Page 41 3.3.1.5 Default Gateway (PPPoE or IPoE) The screen is not available when you select Bridging in the WAN Service Configuration screen. Figure 22 WAN Configuration: Default Gateway Table 20 WAN Configuration: Default Gateway LABEL DESCRIPTION Selected Default Select a WAN interface through which to forward the service’s traffic. Gateway You can select multiple WAN interfaces for the device to try.
Page 42 Table 20 WAN Configuration: Default Gateway (continued) LABEL DESCRIPTION Selected WAN Select a WAN interface through which to forward IPv6 traffic. Interface Selected Default Select an IPv6 WAN interface through which to forward the service’s IPv6 traffic. IPv6 Gateway You can select multiple WAN interfaces for the device to try. The Router tries the Interfaces WAN interfaces in the order listed and uses only the default gateway of the first WAN interface that connects;...
Page 43  If you configure only one IPoE connection, you must enter the static DNS server address. Figure 23 WAN Configuration: DNS Server: PPPoE or IPoE Chapter 3 WAN...
Page 44 Table 21 WAN Configuration: DNS Server: PPPoE or IPoE LABEL DESCRIPTION Select DNS Server Select this to have the Router get the DNS server addresses from one of the Interface from Router’s WAN interfaces. available WAN interfaces Selected DNS Select a WAN interface through which to get DNS server addresses. Server You can select multiple WAN interfaces for the device to try.
Page 45 3.3.1.7 Configuration Summary This read-only screen shows the current WAN connection settings. Figure 24 WAN Configuration: Configuration Summary Table 22 WAN Configuration: Configuration Summary LABEL DESCRIPTION Connection Type This is the encapsulation method used by this connection. This shows whether NAT is active or not for this connection. Full Cone NAT This shows whether full cone NAT is active or not for this connection.
Page 46 H A PT ER Chapter 4 4.1 LAN Setup Click Advanced Setup > LAN to open the LAN Setup screen. Use this screen to set the Local Area Network IP address and subnet mask of your Router and configure the DNS server information that the Router sends to the DHCP client devices on the LAN.
Page 47 Figure 25 LAN Setup Chapter 4 LAN...
Page 48 Table 23 LAN Setup LABEL DESCRIPTION Group Name Select the LAN interface for which to configure the IP address and subnet mask. IP Address Enter the LAN IP address you want to assign to your Router. The factory default is 192.168.1.1.
Page 49 Table 23 LAN Setup (continued) LABEL DESCRIPTION Gateway Enter the IPTV server’s IP address. Subnet Mask Enter the IPTV server’s subnet mask. Pool Start/End Specify the first and last of the contiguous addresses in the IPTV server’s IP address pool. DNS Server 1/2 Enter the IPTV server’s first/second DNS server IP address.
Page 50 Table 24 Add DHCP Static IP Lease LABEL DESCRIPTION MAC Address Enter the MAC address of a computer on your LAN. Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02.
Page 51 Table 25 LAN Additional Subnet LABEL DESCRIPTION Active Select the check box to configure a LAN network for the Router. IP Address Enter the IP address of your Router in dotted decimal notation. IP Subnet Mask Your Router will automatically calculate the subnet mask based on the IP address that you assign.
Page 52 Table 26 LAN VLAN (continued) LABEL DESCRIPTION Pbits Set the IEEE 802.1p priority tag value (o to 7) to use for the LAN port’s downstream traffic. The larger the number, the higher the priority. Remove Select an entry and click the Remove button to delete it. Click this button to create a new LAN VLAN setting entry.
Page 53 IPv6 LAN Auto Configuration Click Advanced Setup > LAN > IPv6 Autoconfig to open the IPv6 LAN Auto Configuration screen. Use this screen to set the Local Area Network interface IPv6 settings. Figure 29 IPv6 LAN Auto Configuration Chapter 4 LAN...
Page 54 The following table describes the fields in this screen. Table 27 IPv6 LAN Auto Configuration LABEL DESCRIPTION Interface Address To use a static IPv6 address, enter the IPv6 address prefix and prefix length that the Router uses for the LAN IPv6 address. The IPv6 prefix length specifies how many most significant bits (starting from the left) in the address compose the network address.
Page 55 Table 27 IPv6 LAN Auto Configuration (continued) LABEL DESCRIPTION Statically Select this to send a fixed LAN IPv6 address prefix. Configure Prefix: enter the IPv6 prefix and length the Router uses to generate the LAN IPv6 address. The prefix length specifies how many most significant bits (starting from the left) in the address compose the network address.
Page 56 H A PT ER Chapter 5 L2TP VPN Client Use this screen to manage WAN service Layer 2 Tunneling Protocol (L2TP) client settings for connecting to L2TP servers. Click Advanced Setup > VPN > L2TP Client to open this screen as shown next. Figure 30 L2TP Client This screen contains the following fields: Table 28 L2TP Client...
Page 57 5.1.1.1 Name and Server IP Address This screen displays when you add a new L2TP client WAN service. Figure 31 L2TP Client: Add This screen contains the following fields: Table 29 L2TP Client: Add LABEL DESCRIPTION Tunnel Name Enter the name for this client connection. L2TP Server Ip Enter the IP address of the L2TP server.
Page 58 Table 29 L2TP Client: Add (continued) LABEL DESCRIPTION MPPE Stateful? Select Yes to enable stateful MPPE encryption. This can increase performance over stateless MPPE, but should not be used in lossy network environments like layer two tunnels over the Internet. User Name Enter the user name for connecting to the L2TP server.
Page 59 5.1.1.2 PPP This screen displays second when you add a new L2TP client WAN service. Figure 32 L2TP Client Add: PPP Chapter 5 VPN...
Page 60 This screen contains the following fields: Table 30 L2TP Client Add: PPP LABEL DESCRIPTION PPP Username Enter the user name exactly as your ISP assigned. If assigned a name in the form user@domain where domain identifies a service name, then enter both components exactly as given.
Page 61 5.1.1.3 L2TP Client Add: Configuration Summary This read-only screen shows the current L2TP WAN connection settings. Figure 33 L2TP Client Add: Configuration Summary Table 31 L2TP Client Add: Configuration Summary LABEL DESCRIPTION Connection Type This is the encapsulation method used by this connection. This shows whether NAT is active or not for this connection.
Page 62 H A PT ER Network Address Translation Chapter 6 (NAT) Virtual Servers Click Advanced Setup > NAT > Virtual Servers to open the screen where you manage the list of virtual server rules. A virtual server set is a list of inside (behind NAT on the LAN) servers, for example, web or FTP, that you can make visible to the outside world even though NAT makes your whole inside network appear as a single computer to the outside world.
Page 63 Table 32 Virtual Servers (continued) LABEL DESCRIPTION Server Name This field displays the name of the service used by the packets for this virtual server. External Port This is the first external port number that identifies a service. Start External Port This is the last external port number that identifies a service.
Page 64 You may enter a single port number or a range of port numbers to be forwarded, and the local IP address of the desired server. The port number identifies a service; for example, web service is on port 80 and FTP on port 21. In some cases, such as for unknown services or where one server can support more than one service (for example both FTP and web service), it might be better to specify a range of port numbers.
Page 65 Table 33 Virtual Servers Add LABEL DESCRIPTION Use Interface Select a WAN interface for which you want to configure a virtual server rules. Service Name Select a Service: use the drop-down list to select a service. Custom Service: type a name to specify a different service. Server IP Enter the inside IP address of the LAN device to which the virtual server forwards Address...
Page 66 Trigger port forwarding solves this problem by allowing computers on the LAN to dynamically take turns using the service. The Router records the IP address of a LAN computer that sends traffic to the WAN to request a service with a specific port number and protocol (a "trigger" port). When the Router's WAN port receives a response with a specific port number and protocol ("open"...
Page 67 Table 34 Port Triggering LABEL DESCRIPTION Click this to create a new rule. Remove Select entries and click the Remove button to delete them. This is the index number of the entry. Status This field displays whether the port triggering rule is active or not. A yellow bulb signifies that this rule is active.
Page 68 6.2.1 Add Port Triggering Rule This screen lets you create new port triggering rules. Click Add in the Port Triggering screen to open the following screen. Figure 38 Port Triggering: Add Table 35 Port Triggering: Add LABEL DESCRIPTION User Interface Select a WAN interface for which you want to configure port triggering rules.
Page 69 Table 35 Port Triggering: Add (continued) LABEL DESCRIPTION Trigger Port Type a port number or the ending port number in a range of port numbers. Trigger Select the transport layer protocol from TCP, UDP, or TCP/UDP. Protocol Open Port The open port is a port (or a range of ports) that a server on the WAN uses when it sends Start out a particular service.
Page 70 DMZ Host Click > DMZ Host to specify the IP address of a default server to receive Advanced Setup > NAT packets from ports not specified in the Port Forwarding screen. Figure 39 DMZ Host Table 36 DMZ Host LABEL DESCRIPTION DMZ Host IP Enter the IP address which receives packets from ports that are not specified in the Port...
Page 71 The SIP ALG allows SIP calls to pass through NAT by examining and translating IP addresses embedded in the data stream. When the Router registers with the SIP register server, the SIP ALG translates the Router’s private IP address inside the SIP data stream to a public IP address. You do not need to use STUN or an outbound proxy if you enable the SIP ALG.
Page 72 H A PT ER Firewall Chapter 7 Firewall General Use this screen to enable or disable the firewall and manage the default policies (filters). Click Advanced Setup > Firewall to open the General screen. Figure 41 Firewall General Table 38 Firewall General LABEL DESCRIPTION Active...
Page 73 Table 38 Firewall General (continued) LABEL DESCRIPTION Default This displays the default action that the firewall is to take on packets that are traveling in the Action selected direction and do not match any of the firewall rules. Drop: the Router silently discards the packets without sending a TCP reset packet or an ICMP destination-unreachable message to the sender.
Page 74 Table 39 Default Policy (continued) LABEL DESCRIPTION Default Specify whether the firewall silently discards packets (Drop) or allows the passage of packets Action (Permit). Back Click Back to return to the previous screen. Apply Click Apply to save your customized settings and exit this screen. Firewall Rules ...
Page 75 Table 40 Firewall Rules LABEL DESCRIPTION Incoming/ The following fields summarize the rules you have created that apply to traffic traveling Outgoing in the selected packet direction. Rules This is your firewall rule number. The ordering of your rules is important as rules are applied in turn.
Page 76 7.2.1 Firewall Rules Configuration In the Firewall Rules screen, click Add or click a rule’s Edit button to display this screen and refer to the following table for information on the labels. Figure 44 Firewall Rules: Add Table 41 Firewall Rules: Add LABEL DESCRIPTION Active...
Page 77 Table 41 Firewall Rules: Add (continued) LABEL DESCRIPTION Direction Select a direction of travel of packets for which you want to configure the firewall rule. Protocol Select the IP protocol (TCP, UDP or ICMP) and enter the protocol (service type) number in the port field.
Page 78 Every Ethernet device has a unique MAC (Media Access Control) address. The MAC address is assigned at the factory and consists of six pairs of hexadecimal characters, for example, 00:A0:C5:00:00:02. You need to know the MAC address of the devices to configure this screen. Figure 45 MAC Filtering The following table describes the labels in this menu.
Page 79 The following table describes the labels in this menu. Table 43 MAC Filtering Add LABEL DESCRIPTION MAC Address Enter the MAC address in a valid MAC address format, that is, six hexadecimal character pairs, for example, 12:34:56:78:9a:bc. Apply/Save Click this button to save your changes. Chapter 7 Firewall...
Page 80 H A PT ER Parental Control Chapter 8 Time Restriction Click Advanced Setup > Parental Control > Time Restriction to configure access time schedules for specific users. Figure 47 Time Restriction Table 44 Time Restriction LABEL DESCRIPTION Username This is the name of the user whose access the rule controls. This is the MAC address of the LAN or wireless device whose access the rule controls.
Page 81 8.1.1 Add a Time Restriction Rule Click Add in the Time Restriction screen to add a new rule. Use this screen to configure a restricted access schedule. Figure 48 Time Restriction: Add Table 45 Time Restriction: Add LABEL DESCRIPTION Username Specify the name of the user whose access the rule controls.
Page 82 URL Filter Click Advanced Setup > Parental Control > Url Filter to use the Url Filter screen to block or allow access to specific web sites. Figure 49 URL Filter Table 46 URL Filter LABEL DESCRIPTION URL List Type Select Exclude to block access to the URLs in the list and allow access to other URLs. Select Include to allow access to the URLs in the list and block access to other URLs.
Page 83 8.2.1 Add a URL Filter Rule Click Add in the URL Filter screen to add a new entry. Use this screen to configure a URL filtering setting to control access to certain web sites. Figure 50 URL Filter: Add Table 47 URL Filter: Add LABEL DESCRIPTION URL Address...
Page 84 H A PT ER Quality of Service (QoS) Chapter 9 QoS General Click Advanced Setup > Quality of Service to enable or disable QoS, set the bandwidth, and select to have the Router automatically assign priority to upstream traffic according to the IP precedence or packet length.
Page 85 Queue Setup Click Advanced Setup > Quality of Service > Queue Setup to use the Queue Setup screen to configure QoS queue assignment. Figure 52 Queue Setup Table 49 Queue Setup LABEL DESCRIPTION Name This shows the descriptive name of this queue. This is the queue’s index number.
Page 86 Table 49 Queue Setup (continued) LABEL DESCRIPTION Click Add to create a new queue. Enable activate them. Select disabled entries and click the Enable button to 9.2.1 Add a QoS Queue Click the Add button in the QoS Queue screen to configure a new queue. Figure 53 Queue Setup: Add Table 50 Queue Setup: Add LABEL...
Page 87 Table 50 Queue Setup: Add (continued) LABEL DESCRIPTION Queue Select a queue precedence level (from 1 to 8) to configure for the selected interface. The Precedence smaller the number, the higher the priority level. Traffic assigned to higher priority queues gets through faster while traffic in lower priority queues is dropped if the network is congested.
Page 88 Table 51 QoS Classification Setup (continued) LABEL DESCRIPTION CLASSIFICATION These fields show the criteria specified in the classifier rule. For example the CRITERIA interface from which traffic of this class comes and the source MAC address of traffic that matches this classifier. Class Intf This displays the ingress interface to which the classifier applies.
Page 89 9.3.1 Add QoS Class Click Add in the Class Setup screen to configure a new classifier. Figure 55 Add QoS Class Table 52 Add QoS Class LABEL DESCRIPTION Traffic Class Name Enter a descriptive name of up to 15 printable English keyboard characters, not including spaces.
Page 90 Table 52 Add QoS Class (continued) LABEL DESCRIPTION Specify Classification Configure these fields to identify the traffic to which the class applies. The fields Criteria available vary depending on the selected interface and Ether type. Leave a field blank to not apply that criterion. Class Interface Select the ingress interface to which the classifier applies.
Page 91 Table 52 Add QoS Class (continued) LABEL DESCRIPTION Specify Classification Configure these fields to change traffic that matches the classifier. The fields Results available vary depending on the selected interface, Ether type, and sometimes on the selected class queue. Leave a field blank to not apply that type of change. Specify Class Queue Select the queue to which to add traffic that matches this classifier.
Page 92 H AP T ER Routing Chapter 10 10.1 Default Gateway Click Advanced Setup > Routing > Default Gateway to open the Default Gateway screen. Use this screen to select WAN interfaces to serve as system default gateways. Figure 56 Default Gateway Move the WAN interfaces to serve as system default gateways from Available Routed WAN Interfaces to Selected Default Gateway Interfaces.
Page 93 10.2 Static Route Click Advanced Setup > Routing > Static Route to view and configure the static route rules on the Router. Figure 57 Static Route Table 53 Static Route LABEL DESCRIPTION IP Version This displays whether the entry uses IPv4 or IPv6. DstIP/ This specifies the IP network address and prefix length of the final destination.
Page 94 10.2.1 Add Static Route Use this screen to add a static route. Click Add in the Static Route screen to display the following screen. Figure 58 Static Route: Add Table 54 Static Route: Add LABEL DESCRIPTION IP Version Select whether your IP type is IPv4 or IPv6. Destination IP address/ Enter the IPv4 or IPv6 address and network length of the final destination.
Page 95 Use the Policy Routing screen to view and configure routing policies on the Router. Click Advanced Setup > Routing > Policy Routing to open the following screen. Figure 59 Policy Routing Table 55 Policy Routing LABEL DESCRIPTION Policy Name This displays the name of the rule. Source IP This displays the source IP address.
Page 96 10.3.1 Add Policy Routing Click Add in the Policy Routing screen to open the following screen. Use this screen to configure the required information for a policy route. Figure 60 Policy Routing: Add Table 56 Policy Routing: Add LABEL DESCRIPTION Policy Name Enter a descriptive name of printable English keyboard characters, not including spaces.
Page 97 10.4 RIP Click Advanced Setup > Routing > RIP to open the RIP screen. Use this screen to configure RIP settings. Routing Information Protocol (RIP, RFC 1058 and RFC 1389) allows a device to exchange routing information with other routers. Figure 61 RIP Table 57 RIP LABEL...
Page 98 H AP T ER Chapter 11 11.1 DNS Server DNS (Domain Name System) maps a domain name to its corresponding IP address and vice versa. The DNS server is extremely important because without it, you must know the IP address of a machine before you can access it.
Page 99 Figure 62 DNS Server Chapter 11 DNS...
Page 100 The following table describes the fields in this screen. Table 58 DNS Server LABEL DESCRIPTION Select DNS Server Select this to have the Router get the DNS server addresses from one of the Interface from Router’s WAN interfaces. available WAN interfaces Selected DNS Select a WAN interface through which to get DNS server addresses.
Page 101 Click Advanced Setup > DNS > Dynamic DNS to configure DDNS entries. Figure 63 Dynamic DNS The following table describes the fields in this screen. Table 59 Dynamic DNS LABEL DESCRIPTION Hostname This displays the entry’s domain name. Username This displays the entry’s user name. Service This displays the entry’s Dynamic DNS service provider.
Page 102 11.2.1 Dynamic DNS Add Use this screen to create a DDNS entry. Click the Dynamic DNS screen’s Add button to display the following screen. Figure 64 Dynamic DNS Add The following table describes the fields in this screen. Table 60 Dynamic DNS Add LABEL DESCRIPTION D-DNS...
Page 103 H AP T ER UPnP Chapter 12 12.1 UPnP Universal Plug and Play (UPnP) is a distributed, open networking standard that uses TCP/IP for simple peer-to-peer network connectivity between devices. A UPnP device can dynamically join a network, obtain an IP address, convey its capabilities and learn about other devices on the network. In turn, a device can leave a network smoothly and automatically when it is no longer in use.
Page 104 H AP T ER DNS Proxy Chapter 13 13.1 DNS Proxy Use DNS Proxy to have the send its own address to the LAN clients for them to use as the Router DNS server. Click Advanced Setup > DNS Proxy to open the DNS Proxy screen. Figure 66 DNS Proxy Table 62 DNS Proxy LABEL...
Page 105 H AP T ER Interface Grouping Chapter 14 14.1 Interface Grouping By default, all LAN and WAN interfaces on the Router are in the same group and can communicate with each other. Create interface groups to have the Router assign the IP addresses in different domains to different groups.
Page 106 The following table describes the fields in this screen. Table 63 Interface Grouping LABEL DESCRIPTION Group Name This shows the descriptive name of the group. Remove Select this check box and click the Remove button to delete the group from the Router. This shows the WAN interfaces in the group.
Page 107  An interface can belong to only one group at a time. Figure 68 Interface Grouping: Add Chapter 14 Interface Grouping...
Page 108 The following table describes the fields in this screen. Table 64 Interface Grouping: Add LABEL DESCRIPTION Group Name Enter a name to identify this group. You can enter up to 30 characters. You can use letters, numbers, hyphens (-) and underscores (_). Spaces are not allowed. Select the WAN interface this group uses.
Page 109 H AP T ER IP Tunnel Chapter 15 15.1 IPv6inIPv4 (6RD) Use IPv6 Rapid Deployment (6RD) when the local network uses IPv6 and the ISP has an IPv4 network. When the Router has an IPv4 WAN address and is configured to IPv4 only, you can enable 6RD to encapsulate IPv6 packets in IPv4 packets to cross the ISP’s IPv4 network.
Page 110 Table 65 IPv6inIPv4 LABEL DESCRIPTION Name This displays the IPv6 to IPv4 tunnel’s name. This displays the associated WAN interface. This displays the associated LAN interface. Dynamic This displays the type of 6RD. IPv4 Mask This displays the subnet mask number for the IPv4 network. Length 6rd Prefix This displays the IPv6 prefix for tunneling IPv6 traffic to the ISP’s border relay router and...
Page 111 Table 66 IPv6inIPv4: Add LABEL DESCRIPTION Tunnel Enter a descriptive name for the IPv6 through IPv4 tunnel. Name Mechanism The current mechanism is set to 6RD to tunnel IPv6 traffic from the local network through the ISP’s IPv4 network. Associated Select a WAN interface to associate with the IPv6 to IPv4 tunnel.
Page 112 The Router tunnels IPv4 packets inside IPv6 encapsulation packets to the ISP’s Address Family Transition Router (AFTR in the graphic) to connect to the IPv4 Internet. The local network can also use IPv6 services. The Router uses it’s configured IPv6 WAN IP to route IPv6 traffic to the IPv6 Internet.
Page 113 Table 67 IPv4inIPv6 (continued) LABEL DESCRIPTION Remove Select an entry and click the Remove button to delete it. Click this to add a new IPv4 through IPv6 tunnel. 15.2.1 IPv4inIPv6 Configuration Click the Add button in the IPv4inIPv6 screen to add a new IPv6 through IPv4 tunnel entry. Figure 74 IPv4inIPv6: Add Table 68 IPv4inIPv6: Add LABEL...
Page 114 H AP T ER IPSec VPN Chapter 16 16.1 IPSec VPN A virtual private network (VPN) provides secure communications over the the Internet. Internet Protocol Security (IPSec) is a standards-based VPN that provides confidentiality, data integrity, and authentication. This chapter shows you how to configure the Router’s VPN settings. Figure 75 IPSec Fields Summary Remote Network Local Network...
Page 115 This screen contains the following fields: Table 69 IPSec VPN LABEL DESCRIPTION Connection Name The name of the VPN policy. Remote Gateway This is the IP address of the remote IPSec router in the IKE SA. Local Addresses This displays the IP address(es) on the LAN behind your Router. Remote Addresses This displays the IP address(es) on the LAN behind the remote IPSec’s router.
Page 116 16.2 IPSec VPN Add Screen Use these settings to add IPSec VPN policies. Click the Add New Connection button in the Advanced Setup > IPSec VPN screen to open this screen as shown next. Figure 77 IPSec VPN: Add Chapter 16 IPSec VPN...
Page 117 This screen contains the following fields: Table 70 IPSec VPN: Add LABEL DESCRIPTION IPSec Connection Enter the name of the VPN policy. Name IP Version Set whether this policy uses IPv4 or IPv6. Tunnel Mode Select the security protocol to use in the IPSec SA. AH (RFC 2402) - provides integrity, authentication, sequence integrity (replay resistance), and non-repudiation but not encryption.
Page 118 Table 70 IPSec VPN: Add (continued) LABEL DESCRIPTION Key Exchange Method Select the key exchange method: Auto(IKE) - Select this to use automatic IKE key management VPN connection policy. Manual - Select this option to configure a VPN connection policy that uses a manual key instead of IKE key management.
Page 119 Table 70 IPSec VPN: Add (continued) LABEL DESCRIPTION Encryption Algorithm Select which key size and encryption algorithm to use in the IKE SA. Choices are: DES - a 56-bit key with the DES encryption algorithm 3DES - a 168-bit key with the DES encryption algorithm AES - 128 - a 128-bit key with the AES encryption algorithm AES - 196 - a 196-bit key with the AES encryption algorithm AES - 256 - a 256-bit key with the AES encryption algorithm...
Page 120 Table 70 IPSec VPN: Add (continued) LABEL DESCRIPTION Select Diffie-Hellman Select which Diffie-Hellman key group you want to use for encryption keys. Group for Key Choices for number of bits in the random number are: 768, 1024, 1536, 2048, Exchange 3072, 4096, 6114, and 8192.
Page 121 16.3 Technical Reference This section provides some technical background information about the topics covered in this section. 16.3.1 IPSec Architecture The overall IPSec architecture is shown as follows. Figure 78 IPSec Architecture IPSec Algorithms The ESP (Encapsulating Security Payload) Protocol (RFC 2406) and AH (Authentication Header) protocol (RFC 2402) describe the packet formats and the default standards for packet structure (including implementation algorithms).
Page 122 16.3.2 Encapsulation The two modes of operation for IPSec VPNs are Transport mode and Tunnel mode. At the time of writing, the Router supports Tunnel mode only. Figure 79 Transport and Tunnel Mode IPSec Encapsulation Transport Mode Transport mode is used to protect upper layer protocols and only affects the data in the IP packet. In Transport mode, the IP packet contains the security protocol (AH or ESP) located after the original IP header and options, but before any upper layer protocols contained in the packet (such as TCP and UDP).
Page 123 16.3.3 IKE Phases There are two phases to every IKE (Internet Key Exchange) negotiation – phase 1 (Authentication) and phase 2 (Key Exchange). A phase 1 exchange establishes an IKE SA and the second one uses that SA to negotiate SAs for IPSec. Figure 80 Two Phases to Set Up the IPSec SA In phase 1 you must: •...
Page 124 16.3.4 Negotiation Mode The phase 1 Negotiation Mode you select determines how the Security Association (SA) will be established for each connection through IKE negotiations. • Main Mode ensures the highest level of security when the communicating parties are negotiating authentication (phase 1).
Page 125 Transport mode ESP with authentication is not compatible with NAT. Table 71 VPN and NAT SECURITY PROTOCOL MODE Transport Tunnel Transport Tunnel 16.3.6 VPN, NAT, and NAT Traversal NAT is incompatible with the AH protocol in both transport and tunnel mode. An IPSec VPN using the AH protocol digitally signs the outbound packet, both data payload and headers, with a hash value appended to the packet, but a NAT device between the IPSec endpoints rewrites the source or destination address.
Page 126 Finally, NAT is compatible with ESP in tunnel mode because integrity checks are performed over the combination of the "original header plus original payload," which is unchanged by a NAT device. The compatibility of AH and ESP with NAT in tunnel and transport modes is summarized in the following table.
Page 127 Table 73 Local ID Type and Content Fields (continued) LOCAL ID CONTENT= TYPE= E-mail Type an e-mail address (up to 31 characters) by which to identify this Router. The domain name or e-mail address that you use in the Local ID Content field is used for identification purposes only and does not need to be a real domain name or e- mail address.
Page 128 16.3.9 Diffie-Hellman (DH) Key Groups Diffie-Hellman (DH) is a public-key cryptography protocol that allows two parties to establish a shared secret over an unsecured communications channel. Diffie-Hellman is used within IKE SA setup to establish session keys. Upon completion of the Diffie-Hellman exchange, the two peers have a shared secret, but the IKE SA is not authenticated.
Page 129 H AP T ER Certificates Chapter 17 17.1 Local Certificates The Router can use certificates (also called digital IDs) to authenticate users. Certificates are based on public-private key pairs. A certificate contains the certificate owner’s identity and public key. Certificates provide a way to exchange public keys for use in authentication. Click Advanced Setup >...
Page 130 Table 76 Local Certificates (continued) LABEL DESCRIPTION Action Click the View button to open a screen with an in-depth list of information about the certificate (or certification request). For a certification request, click Load Signed to import the signed certificate. Click the Remove button to delete the certificate (or certification request).
Page 131 Table 77 Create Certificate Request LABEL DESCRIPTION Certificate Name Type up to 63 ASCII characters (not including spaces) to identify this certificate. Common Name Select Auto to have the Router configure this field automatically. Or select Customize to enter it manually. Type the IP address (in dotted decimal notation), domain name or e-mail address in the field provided.
Page 132 17.1.2 Load Signed Certificate After you create a certificate request and have it signed by a Certificate Authority, in the Local Certificates screen click the certificate request’s Load Signed button to import the signed certificate into the Router.  You must remove any spaces from the certificate’s filename before you can import it. Figure 85 Load Signed Certificate Table 78 Load Signed Certificate LABEL...
Page 133 Click Advanced Setup > Certificates > Trusted CA to open the Trusted CA screen. Figure 86 Trusted CA Table 79 Trusted CA LABEL DESCRIPTION Name This field displays the name used to identify this certificate. Subject This field displays information that identifies the owner of the certificate, such as Common Name (CN), OU (Organizational Unit or department), Organization (O), State (ST) and Country (C).
Page 134 17.2.1 View Trusted CA Certificate Click the View icon in the Trusted CA screen to open the following screen. Use this screen to view in-depth information about the certification authority’s certificate. Figure 87 Trusted CA: View The following table describes the fields in this screen. Table 80 Trusted CA: View LABEL DESCRIPTION...
Page 135 17.2.2 Import Trusted CA Certificate Click the Trusted CA screen’s Import Certificate button to open the following screen. The Router trusts any valid certificate signed by any of the imported trusted CA certificates. Figure 88 Trusted CA: Import Certificate The following table describes the fields in this screen. Table 81 Trusted CA: Import Certificate LABEL DESCRIPTION...
Page 136 H AP T ER Power Management Chapter 18 18.1 Power Management Click Advanced Setup > Power Management to control hardware modules to reduce power consumption. Use the control buttons to select the desired option, click Apply and check the status response.
Page 137 Table 82 Power Management LABEL DESCRIPTION MIPS CPU Clock Select Enable to reduce the MIPS CPU’s clock when idle to reduce power usage. Clear divider when Idle this to always run the MIPS CPU at full speed. Wait instruction Select Enable to put the CPU to sleep when idle to reduce power usage. Clear this to when Idle always keep the CPU running.
Page 138 H AP T ER Multicast Chapter 19 19.1 Multicast Click Advanced Setup > Multicast to configure multicast and IGMP and MLD group settings. Figure 90 Multicast Chapter 19 Multicast...
Page 139 s: My Network Places: Properties: Example Table 83 Multicast LABEL DESCRIPTION Multicast Set the Router’s multicast precedence (1 to 9) or disable multicast on the Router. The Precedence lower the number, the higher the Router’s multicast priority. IGMP/MLD Configuration Default Version Enter the version of IGMP (1~3) and MLD (1~2) that you want the Router to use on the WAN.
Page 140 H AP T ER Wireless Chapter 20 20.1 Wireless Basic Use the Advanced Setup > Wireless screens to configure the 2.4 GHz wireless network. Click Advanced Setup > Wireless to enable or disable the 2.4 GHz Wireless LAN and configure basic settings.
Page 141 Figure 91 Wireless Basic Table 84 Wireless Basic LABEL DESCRIPTION Enable Wireless Select this check box to activate the wireless LAN. Enable Wireless Hotspot2.0 Hide Access Select this check box to hide the SSID in the outgoing beacon frame so a station cannot Point obtain the SSID through scanning using a site survey tool.
Page 142 Table 84 Wireless Basic (continued) LABEL DESCRIPTION Enable Wireless Select this check box to have the Router convert wireless multicast traffic (IGMP version 2 Multicast or 3) into wireless unicast traffic to reduce the traffic load. This function can improve the Forwarding transmission quality of video services (for example, IPTV).
Page 143 20.2 Wireless Security Click Wireless > Security to open the Security screen. Set Network Authentication to Open and WEP Encryption to Disabled to allow wireless stations to communicate with the Router without any data encryption or authentication.  If you do not enable any wireless security on your Router, your network is accessible to any wireless networking device that is within range.
Page 144 Figure 92 Wireless Security Chapter 20 Wireless...
Page 145 Table 85 Wireless Security LABEL DESCRIPTION Enable WPS Use WiFi Protected Setup (WPS) to quickly set up a wireless network without having to manually configure settings. Set up each WPS connection between two devices at a time. Add Client Use this section to add a wireless client to the wireless network. Select Use STA PIN to add a client by entering the client’s Personal Identification Number (PIN) in the field that displays when you select this option.
Page 146 Table 85 Wireless Security LABEL DESCRIPTION WPA/WAPI This field displays when you select WPA2-PSK or Mixed WPA2/WPA -PSK. passphrase Use the automatically generated password or enter 16 to 63 alphanumeric characters (0-9, A-Z, with no spaces). It must contain both letters and numbers and is case- sensitive.
Page 147 20.3 Wireless MAC Filter Click Wireless > MAC Filter to open the MAC Filter screen. This screen allows you to configure the Router to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the Router (Deny). Every Ethernet device has a unique MAC (Media Access Control) address assigned at the factory.
Page 148 20.3.1 Wireless MAC Filter Add Use this screen to add MAC address entries. Click Wireless > MAC Filter > Add to open the following screen. Figure 94 Wireless MAC Filter Add Table 87 Wireless MAC Filter Add LABEL DESCRIPTION Enter the MAC address of the wireless device that is to be allowed or denied access to the Address Router.
Page 149 20.4 Wireless Advanced Click Wireless > Advanced to configure advanced wireless settings. Figure 95 Wireless Advanced Chapter 20 Wireless...
Page 150 Table 88 Wireless Advanced LABEL DESCRIPTION Band Select an operating band to use. Channel Select an operating channel to use. The choices depend on your particular region. Either select a channel or use Auto to have the Router automatically determine a channel to use.
Page 151 Table 88 Wireless Advanced (continued) LABEL DESCRIPTION OBSS Co- Select Enable to allow coexistence between 20 MHZ and 40 MHZ Overlapping Basic Existance Service Sets (OBSS) in wireless local area networks. RX Chain Power Select Enable to activate the RX Chain Power Save feature. It turns off one of the Save Receive chains to save power.
Page 152 Table 88 Wireless Advanced (continued) LABEL DESCRIPTION Transmit Power Set the output power of the Router. If there is a high density of APs in an area, decrease the output power to reduce interference with other APs. WMM (Wi-Fi Use WMM (Wifi MultiMedia) to prioritize services in wireless traffic. Multimedia) Select Auto to automatically prioritize services according to the ToS value in the IP header of packets.
Page 153 The following table describes the labels in this menu. Table 89 Wireless Station Info LABEL DESCRIPTION This displays the MAC address (in XX:XX:XX:XX:XX:XX format) of a connected wireless station. Associated This is the time that the wireless client associated with the Router. Authorized This is the time that the wireless client’s connection to the Router was authorized.
Page 154  If you are configuring the Router from a computer connected to the wireless LAN and you change the Router’s SSID or security settings, you will lose your wireless connection when you press Apply to confirm. You must then change the wireless settings of your computer to match the Router’s new settings.
Page 155 Table 90 Wireless 5GHz Basic (continued) LABEL DESCRIPTION SSID Enter a descriptive name for the wireless LAN. BSSID This shows the MAC address of the wireless interface on the Device when wireless LAN is enabled. Country Select the country you have the Router in. This has the Router use the correct frequency bands.
Page 156 20.7 Wireless 5GHz Advanced Screen Click Wireless 5GHz > Advanced to configure advanced 5 GHz wireless settings. Figure 98 Wireless 5GHz Advanced Table 91 Wireless 5GHz Advanced LABEL DESCRIPTION Region Select an operating band to use. Bandwidth Select whether the Device uses a wireless channel width of 20MHz, 40MHz, or 80MHz. A standard 20MHz channel offers transfer speeds of up to 150Mbps whereas a 40MHz channel uses two standard channels and offers speeds of up to 300 Mbps, and a 80MHz channel uses only one channel and offers speeds of up to 433 Mbps.
Page 157 Table 91 Wireless 5GHz Advanced (continued) LABEL DESCRIPTION DTIM Delivery Traffic Indication Message (DTIM) is the time period after which broadcast and multicast packets are transmitted to mobile clients in the Power Saving mode. A high DTIM value can cause clients to lose connectivity with the network.
Page 158 Figure 99 Wireless 5GHz WPS Table 92 Wireless 5GHz WPS LABEL DESCRIPTION Enable WPS Use WiFi Protected Setup (WPS) to quickly set up a wireless network without having to manually configure settings. Set up each WPS connection between two devices at a time.
Page 159 Table 92 Wireless 5GHz WPS (continued) LABEL DESCRIPTION Select SSID Select an SSID for which to configure security settings. Enabled WPS Use WiFi Protected Setup (WPS) to quickly set up a wireless network without having to manually configure settings. Set up each WPS connection between two devices at a time.
Page 160 20.9 Wireless 5GHz MAC Filter Click Wireless 5GHz > MAC Filter to open the MAC Filter screen. This screen allows you to configure the Router to give exclusive access to specific devices (Allow) or exclude specific devices from accessing the Router (Deny). Every Ethernet device has a unique MAC (Media Access Control) address assigned at the factory.
Page 161 20.9.1 Wireless MAC Filter Add Use this screen to add MAC address entries. Click Wireless > MAC Filter > Add to open the following screen. Figure 101 Wireless MAC Filter Add Table 94 Wireless MAC Filter Add LABEL DESCRIPTION Enter the MAC address of the wireless device that is to be allowed or denied access to the Address Router.
Page 162 20.10 Wireless 5GHz Bridge The Router can function as a wireless network bridge to wirelessly connect two or more APs. Figure 102 Connecting Wireless Networks Using WDS Use this screen to set up your Wireless Distribution System (WDS) links between the Router and other wireless APs.
Page 163 Click Wireless 5GHz > Wireless Bridge to display the following screen. Figure 104 Wireless 5GHz Bridge Table 95 Wireless Bridge LABEL DESCRIPTION Remote Type the MAC address of the peer device in a valid MAC address format (six Bridges MAC hexadecimal character pairs, for example 12:34:56:78:9a:bc).
Page 164 The following table describes the labels in this menu. Table 96 Wireless 5GHz Station Info LABEL DESCRIPTION Select SSID Select an SSID for which to display the authenticated wireless stations and their status. This displays the MAC address (in XX:XX:XX:XX:XX:XX format) of a connected wireless station.
Page 165 H AP T ER Voice Chapter 21 21.1 SIP Account The Router uses a SIP account to make outgoing VoIP calls and check if an incoming call’s destination number matches your SIP account’s SIP number. In order to make or receive a VoIP call, you need to enable and configure a SIP account, and map it to a phone port.
Page 166 Chapter 21 Voice...
Page 167 Each field is described in the following table. Table 97 SIP Account LABEL DESCRIPTION Service Provider Select the SIP service provider profile you want to use for the SIP account you Selection configure in this screen. If you change this field, the screen automatically refreshes.
Page 168 Table 97 SIP Account (continued) LABEL DESCRIPTION Primary Select the type of voice coder/decoder (codec) that you want the Router to use. Compression G.711 provides high voice quality but requires more bandwidth (64 kbps). G.711 is Type the default codec used by phone companies and digital handsets. Secondary •...
Page 169 Table 97 SIP Account (continued) LABEL DESCRIPTION Enable Select this if you want the Router to forward all incoming calls to the specified Unconditional phone number. Forward Specify the phone number in the To Number field on the right. Enable Busy Select this if you want the Router to forward incoming calls to the specified phone Forward number if the phone port is busy.
Page 170 21.2 SIP Server Click Voice > SIP Server to open the SIP Server screen. Use this screen to configure the SIP server information, QoS for VoIP calls, the numbers for certain phone functions, and dialing plan. Figure 107 SIP Server Chapter 21 Voice...
Page 171 Each field is described in the following table. Table 98 SIP Server LABEL DESCRIPTION Service Provider Select the SIP service provider profile you want to see in this screen. If you change Selection this field, the screen automatically refreshes. Select ADD_NEW to create a new SIP service provider profile on the Router. Delete Click this button to remove the SIP service provider profile selected in the Service Provider Selection field.
Page 172 Table 98 SIP Server (continued) LABEL DESCRIPTION REGISTER Server Enter the IP address or domain name of the SIP register server, if your VoIP service Address provider gave you one. Otherwise, enter the same address you entered in the SIP Server Address field.
Page 173 Table 98 SIP Server (continued) LABEL DESCRIPTION Don't send re- Do not send a re-Invite packet to the remote party when the remote party answers Invite to the that it can support multiple codecs?? remote party when there are multiple codecs answered in the Bound Interface Name...
Page 174 Table 98 SIP Server (continued) LABEL DESCRIPTION FAX Option This field controls how the Router handles fax messages. Select G.711 Fax Passthrough to have the use G.711 to send fax messages. The peer devices must also use G.711. Select T.38 Fax Relay to have the Router send fax messages as UDP or TCP/IP packets through IP networks.
Page 175 Table 98 SIP Server (continued) LABEL DESCRIPTION Internal Call Specify the key combinations that you can enter to call the phone(s) connected to the Router. Call Transfer Specify the key combinations that you can enter to transfer a call to another phone. Unconditional Specify the key combinations that you can enter to forward all incoming calls to the Call Forward...
Page 176 Table 98 SIP Server (continued) LABEL DESCRIPTION Dialing Interval Selection Dialing Interval Enter the number of seconds the Router should wait after you stop dialing numbers Selection before it makes the phone call. The value depends on how quickly you dial phone numbers.
Page 177 • <dialed-number:translated-number> indicates the number after the colon replaces the number before the colon in an angle bracket <>. For example, (<:1212> xxxxxxx) means the Router automatically prefixes the translated-number “1212” to the number you dialed before making the call. This can be used for local calls in the US. (<9:>...
Page 178 Table 99 Phone Region LABEL DESCRIPTION Apply Click this to save your changes and to apply them to the Router. Cancel Click this to set every field in this screen to its last-saved value. 21.4 Call Rule Click Voice > Call Rule to manage speed-dial numbers for outgoing calls. Speed dial provides shortcuts for dialing frequently-used (VoIP) phone numbers.
Page 179 Table 100 Call Rule LABEL DESCRIPTION Description Enter a name to identify the party you call when you dial the speed-dial number. You can use up to 127 printable ASCII characters. Click this to use the information in the Speed Dial section to update the Phone Book section.
Page 180 Table 101 Call History Summary LABEL DESCRIPTION This is a read-only index number. Date This is the date when the calls were made. Total Calls This displays the total number of calls from or to your SIP numbers that day. Outgoing Calls This displays how many calls originated from you that day.
Page 181 21.7 Incoming Calls Use this screen to see detailed information for each incoming call from someone calling you. Click Voice > Incoming. The following screen displays. Figure 112 Incoming Calls Each field is described in the following table. Table 103 Incoming Calls LABEL DESCRIPTION Refresh...
Page 182 The Session Initiation Protocol (SIP) is an application-layer control (signaling) protocol that handles the setting up, altering and tearing down of voice and multimedia sessions over the Internet. SIP signaling is separate from the media for which it handles sessions. The media that is exchanged during the session can use a different path from that of the signaling.
Page 183 Authorization Requirements SIP registrations (and subsequent SIP requests) require a username and password for authorization. These credentials are validated via a challenge / response system using the HTTP digest mechanism (as detailed in RFC 3261, "SIP: Session Initiation Protocol"). SIP Servers SIP is a client-server protocol.
Page 184 The SIP proxy server forwards the call invitation to C. Figure 114 SIP Proxy Server SIP Redirect Server A SIP redirect server accepts SIP requests, translates the destination address to an IP address and sends the translated IP address back to the device that sent the request. Then the client device that originally sent the request can send requests to the IP address that it received back from the redirect server.
Page 185 Client device A then sends the call invitation to client device C. Figure 115 SIP Redirect Server SIP Register Server A SIP register server maintains a database of SIP identity-to-IP address (or domain name) mapping. The register server checks your user name and password when you register. When you make a VoIP call using SIP, the RTP (Real time Transport Protocol) is used to handle voice data transfer.
Page 186 Table 104 SIP Call Progression (continued) 3. OK 4. ACK 5.Dialogue (voice traffic) 6. BYE 7. OK A sends a SIP INVITE request to B. This message is an invitation for B to participate in a SIP telephone call. B sends a response indicating that the telephone is ringing. B sends an OK response after the call is answered.
Page 187 The following figure shows the SIP and session traffic flow between the user agents (UA 1 and UA 2) and the proxy servers (this example shows two proxy servers, PROXY 1 and PROXY 2). Figure 116 SIP Call Through Proxy Servers PROXY 1 PROXY 2 &...
Page 188 Table 105 SIP Call Progression UA 1 PROXY 1 PROXY 2 UA 2 200 OK User Agent 1 sends a SIP INVITE request to Proxy 1. This message is an invitation to User Agent 2 to participate in a SIP telephone call. Proxy 1 sends a response indicating that it is trying to complete the request.
Page 189 Voice Activity Detection/Silence Suppression Voice Activity Detection (VAD) detects whether or not speech is present. This lets the Router reduce the bandwidth that a call uses by not transmitting “silent packets” when you are not speaking. Comfort Noise Generation When using VAD, the Router generates comfort noise when the other party is not speaking. The comfort noise lets you know that the line is still connected as total silence could easily be mistaken for a lost connection.
Page 190 You can continue to add, listen to, or delete tones, or you can hang up the receiver when you are done. Listening to Custom Tones Do the following to listen to a custom tone: Pick up the phone and press “****” on your phone’s keypad and wait for the message that says you are in the configuration menu.
Page 191 DSCP and Per-Hop Behavior DiffServ defines a new DS (Differentiated Services) field to replace the Type of Service (TOS) field in the IP header. The DS field contains a 2-bit unused field and a 6-bit DSCP field which can define up to 64 service levels.
Page 192 21.8.2.1 The Flash Key Flashing means to press the hook for a short period of time (a few hundred milliseconds) before releasing it. On newer telephones, there should be a "flash" key (button) that generates the signal electronically. If the flash key is not available, you can tap (press and immediately release) the hook by hand to achieve the same effect.
Page 193 Press the flash key and then “1” to disconnect the current call and resume the call on hold. If you hang up the phone but a caller is still on hold, there will be a remind ring. European Call Waiting This allows you to place a call on hold while you answer another incoming call on the same telephone (directory) number.
Page 194 21.8.2.3 USA Type Supplementary Services This section describes how to use supplementary phone services with the USA Type Call Service Mode. Commands for supplementary services are listed in the table below. After pressing the flash key, if you do not issue the sub-command before the default sub-command timeout (2 seconds) expires or issue an invalid sub-command, the current operation will be aborted.
Page 195 USA Three-Way Conference Use the following steps to make three-way conference calls. When you are on the phone talking to someone (party A), press the flash key to put the caller on hold and get a dial tone. Dial a phone number directly to make another call (to party B). When party B answers the second call, press the flash key to create a three-way conversation.
Page 196 Chapter 21 Voice...
Page 197 H AP T ER Diagnostics Chapter 22 22.1 Diagnostics Click Diagnostics to test the Router’s connections. Figure 118 Diagnostics Click Rerun Diagnostic Tests to perform the tests again. Chapter 22 Diagnostics...
Page 198 22.2 Ping/TraceRoute/Nslookup Ping, traceroute, and nslookup help check availability of remote hosts and also help troubleshoot network or Internet connections. Click Diagnostics > Ping&TraceRoute&Nslookup to open the screen shown next. Figure 119 Ping/TraceRoute/Nslookup Table 110 Ping/TraceRoute/Nslookup LABEL DESCRIPTION Ping Type an IPv4 or IPv6 address to which to test a connection. Click Ping and the ping statistics will show in the diagnostic.
Page 199 H AP T ER Settings Chapter 23 This chapter describes how to manage your Router’s configuration. 23.1 Backup Configuration Using the Web Configurator Click Management > Settings > Backup to open the following screen. Use this screen to back up (save) the Router’s current configuration to a file on your computer.
Page 200 23.2 Restore Configuration Using the Web Configurator Click Management > Settings > Update to open the following screen. Use this screen to upload a new or previously saved configuration file from your computer to your Router. Figure 121 Settings: Update Table 111 Settings: Update LABEL DESCRIPTION...
Page 201 23.3 Restoring Factory Defaults Click Management > Settings > Restore Default to open the following screen. Figure 123 Management > Settings > Restore Default Click Restore Default Settings to clear all user-entered configuration information and return the Router to its factory defaults. You can also press the RESET button on the rear panel to reset the factory defaults of your Router.
Page 202 H AP T ER Logs Chapter 24 24.1 Logs The Web Configurator allows you to choose which categories of events and/or alerts to have the Router log and then display the logs or have the Router send them to an administrator (as e-mail) or to a syslog server.
Page 203 Table 112 Syslog Severity Levels (continued) CODE SEVERITY Informational: The syslog contains an informational message. Debug: The message is intended for debug-level purposes. 24.2 System Log Use the System Log screen to see the system logs. Click Management > System Log > View System Log to open the System Log screen.
Page 204 Table 113 System Log (continued) LABEL DESCRIPTION Messages This field states the reason for the log. Refresh Click this to renew the log screen. Close Click this to close the log screen. 24.3 System Log Configuration To change your Router’s log settings, click Management > System Log > Configure System Log. The screen appears as shown.
Page 205 Table 114 System Log Configuration (continued) LABEL DESCRIPTION Server IP Enter the IP address of the syslog server that will log the selected categories of logs. Address Server UDP Enter the port number used by the syslog server. Port Apply/Save Click this button to save your changes.
Page 206 The following table describes the fields in this screen. Table 115 Security Log LABEL DESCRIPTION Date/Time This field displays when the log was recorded. Facility The log facility allows you to send logs to different files in the syslog server. Refer to the documentation of your syslog program for more details.
Page 207 H AP T ER SNMP Chapter 25 25.1 SNMP Agent Simple Network Management Protocol is a protocol used for exchanging management information between network devices. Your Router supports SNMP agent functionality, which allows a manager station to manage and monitor the Router through the network. The Router supports SNMP version one (SNMPv1) and version two (SNMPv2c).
Page 208 SNMP itself is a simple request/response protocol based on the manager/agent model. The manager issues a request and the agent returns responses using the following protocol operations: • Get - Allows the manager to retrieve an object variable from the agent. •...
Page 209 Table 116 Management > SNMP Agent (continued) LABEL DESCRIPTION System Contact Enter the SNMP system contact. Trap Manager IP Type the IP address of the station to send your SNMP traps to. Save/Apply Click this to save your changes back to the Router. Chapter 25 SNMP...
Page 210 H AP T ER TR-069 Client Chapter 26 26.1 TR-069 Client Click Management > TR-069 Client to open the following screen. Use this screen to configure your Router to be managed by an ACS (Auto Configuration Server). Figure 129 TR-069 Client Table 117 TR-069 Client LABEL DESCRIPTION...
Page 211 Table 117 TR-069 Client (continued) LABEL DESCRIPTION ACS User Name Enter the TR-069 user name for authentication with the auto-configuration server. ACS Password Enter the TR-069 password for authentication with the auto-configuration server. WAN Interface used Select a WAN interface through which the TR-069 traffic passes. by TR-069 client If you select Any_WAN, you should also select the pre-configured WAN connection(s).
Page 212 H AP T ER Internet Time Chapter 27 27.1 Internet Time Click Management > Internet Time to configure the Router to get the time from time servers on the Internet. Figure 130 Internet Time Chapter 27 Internet Time...
Page 213 The following table describes the fields in this screen. Table 118 Internet Time LABEL DESCRIPTION Automatically Select this to have the Router get the time from the specified Internet time servers. synchronize with Internet time servers First ~ Fifth NTP Select an NTP time server from the drop-down list box.
Page 214 H AP T ER User Passwords Chapter 28 28.1 User Passwords Click Management > Access Control > Passwords to change the login password. Figure 131 Use Passwords Table 119 User Passwords LABEL DESCRIPTION User Name Enter the name of one of the Router system accounts. Old Password Type the account’s default password or existing password.
Page 215 H AP T ER GPON Password Chapter 29 29.1 GPON Password Click Management > GPON Password to enter the password for your GPON Internet access account. Figure 132 GPON Password Table 120 GPON Password LABEL DESCRIPTION Enter GPON Enter the password for your GPON Internet access account. Password Apply Click this button to save and apply your changes.
Page 216 H AP T ER Update Software Chapter 30 30.1 Update Software Click Management > Update Software to open the following screen where you can upload new software to your Router. You can download new software releases from your ISP to use to upgrade your device’s performance.
Page 217 After you see the software updating screen, wait two minutes before logging into the Router again. The Router automatically restarts in this time causing a temporary network disconnect. In some operating systems, you may see the following icon on your desktop. Figure 134 Network Temporarily Disconnected After two minutes, log in again and check your new software version in the Device Info screen.
Page 218 H AP T ER Reboot Chapter 31 31.1 Restart Using the Web Configurator Click Management > Reboot to open the following screen. Use this screen to restart the . Figure 135 Reboot Chapter 31 Reboot...
Page 219 H AP T ER Troubleshooting Chapter 32 32.1 Overview This chapter offers some suggestions to solve problems you might encounter. The potential problems are divided into the following categories. • Power, Hardware Connections, and LEDs • Router Access and Login •...
Page 220 Turn the Router off and on. If the problem continues, contact the vendor. 32.3 Router Access and Login  I forgot the IP address for the Router. The default IP address is 192.168.1.1. If you changed the IP address and have forgotten it, you might get the IP address of the Router by looking up the IP address of the default gateway for your computer.
Page 221 Advanced Suggestions • Try to access the Router using another service, such as Telnet. If you can access the Router, check the remote management settings and firewall rules to find out why the Router does not respond to HTTP. • If your computer is connected wirelessly, use a computer that is connected to a ETHERNET port. ...
Page 222 If you are trying to access the Internet wirelessly, make sure you have enabled the wireless LAN by the Wifi/WPS button or the Network Setting > Wireless > General screen. Disconnect all the cables from your device, and follow the directions in Section 1.2 on page 9.
Page 223 To optimize the speed and quality of your wireless connection, you can: • Move your wireless device closer to the AP if the signal strength is low. • Reduce wireless interference that may be caused by other wireless networks or surrounding wireless electronics such as cordless phones.
Page 224 You can also check the VoIP status in the System Info screen. If the VoIP settings are correct, use speed dial to make peer-to-peer calls. If you can make a call using speed dial, there may be something wrong with the SIP server, contact your VoIP service provider.
Page 225 P P EN D IX Safety Warnings Appendix A • Do NOT use this product near water, for example, in a wet basement or near a swimming pool. • Do NOT expose your device to dampness, dust or corrosive liquids. •...
Page 226 Federal Communications Commission (FCC) Interference Statement This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation.

MitraStar Movistar GPT-2541GNAC User Manual

Quick Links

Need help?

Questions and answers

Related Manuals for MitraStar Movistar GPT-2541GNAC

Summary of Contents for MitraStar Movistar GPT-2541GNAC